Privacy Policy

Last updated: 31 October 2026

This Privacy Notice for Max Glaser, doing business as Hushtick ("we", "us", or "our"), describes how and why we access, collect, store, use and share ("process") your personal information when you use our services ("Services"), including when you:

• visit our website at https://hushtick.com, or any website of ours that links to this Privacy Notice;
• install and use Hushtick as an app on your phone or computer (Hushtick is a web app you can add to your home screen);
• use Hushtick, a stock-analysis web app for individual investors. It reads the news, price action, technicals and fundamentals for the stocks you follow and shows where the evidence leans (bullish, bearish or neutral), with the reasons and risks behind each read. You can practise with a paper-trading portfolio using simulated money only; Hushtick does not connect to brokerage accounts or handle real funds. Hushtick provides general analysis and education, not personalised investment advice or buy/sell recommendations;
• join our waitlist, or contact us in other ways.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for deciding how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you have any questions, contact us at hello@hushtick.com.

Summary of key points

• What personal information do we process? Mainly your email address, your account and settings, and what you do in the app (your paper portfolio, watchlist and AI questions). See section 1.
• Do we process sensitive personal information? No.
• Do we collect information from third parties? No.
• How do we process your information? To provide, improve and administer the Services, communicate with you, keep the Services secure, and comply with law. See section 2.
• Do we sell your information or use it for advertising? No. We share it only with the service providers that run Hushtick for us. See section 4.
• How do we keep your information safe? With organisational and technical measures, although no system is 100% secure. See section 9.
• What are your rights? Depending on where you live, you may have rights to access, correct, delete or export your information. See section 11.
• How do you exercise your rights? In the app at Settings, or by emailing hello@hushtick.com.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on?
4. When and with whom do we share your personal information?
5. Is your information transferred internationally?
6. Do we use cookies and other tracking technologies?
7. Do we offer artificial intelligence-based products?
8. How long do we keep your information?
9. How do we keep your information safe?
10. Do we collect information from minors?
11. What are your privacy rights?
12. Controls for Do-Not-Track features
13. Do United States residents have specific privacy rights?
14. Users in Israel
15. Paper trading, waitlist and AI analysis
16. Do we make updates to this notice?
17. How can you contact us about this notice?
18. How can you review, update or delete the data we collect from you?

1. What information do we collect?

Personal information you give us

In short: we collect the personal information you provide to us.

We collect personal information that you give us when you join the waitlist, create an account, use the Services, or contact us. Depending on how you use Hushtick, this may include:

• email address;
• first name, only if we add it to the personal invite email we send you (we type it ourselves; it is used only in that email);
• password (handled by our login provider and stored only in hashed form; we never see it);
• contact preferences, such as which alerts you receive, by email or push, your quiet hours, and whether you get the weekly email;
• paper-trading portfolio data: your watchlist, simulated holdings, simulated trades (including the estimated broker fees we apply), practice cash balances, and any price alerts and practice limit or stop orders you set (the stock, the price level, and when it fired, filled, expired or failed); simulated money only;
• investing profile you choose to set in Settings: experience level, risk appetite, preferred level of detail and goals;
• language preference;
• Telegram or WhatsApp connection, only if you choose to get your alerts there: your Telegram chat ID, or your WhatsApp phone number, so we can send you the same alerts you get on your phone. You can disconnect at any time in Settings or by sending /stop or STOP;
• things you ask us to check ("check anything"), only if you use it: a neutral summary of the claim (without people's names, phone numbers or @handles), the source label you give it, and our result; the text and screenshots you send are read to make the check but not stored;
• questions you ask the AI assistant, and its answers, saved so it can follow the conversation and pick up where you left off; and a short note the assistant keeps about you (the topics and stocks you ask about and how much detail you like). The note never includes your name, contact details, holdings, amounts of money or other personal details;
• optional survey answers about whether you trade with real money and which broker you use;
• feedback and other optional free-text responses, for example feedback you send from the app (your rating, your message and the page you were on, sent to us by email so we can reply) or why you were interested in a paid plan;
• your own AI provider API key, if you choose to add one (stored encrypted).

If you join through a personal guest link that someone shared with you, we ask only for your email address, and we record which link you joined through, when you joined and when you last came back through it.

We do not ask you for your full name, phone number (unless you choose to connect WhatsApp), postal or billing address, payment card details, government ID, or any bank or brokerage account details.

Sensitive information. We do not process sensitive information.

Information collected automatically

In short: some information, such as your IP address and how you use the app, is collected automatically.

• IP address, held briefly to limit the number of requests and protect the Services from abuse. Our hosting providers may also record it in their short-term server logs.
• Usage information: the days you use the app, which AI features you use and when (so we can apply daily limits and control costs), when you reach a daily AI limit (the time and which limit, so we can set the limits fairly), whether you clicked on a planned paid plan, which link brought you to Hushtick (for example, an ad or a post; when you create your account we copy that link's label onto it once, and it decides which price you are offered for a paid plan later), how much your AI use costs us each calendar month (so we can apply the free monthly AI allowance), and how many requests your account makes each day (so we can spot abuse, such as automated copying).
• Your confirmation that Hushtick is general information (our opt-in record): before your first stock read you confirm (once, and again if we change the wording) that you understand Hushtick shows general analysis that is the same for everyone and isn't personalised investment advice. We keep when you confirmed, which wording version you saw and in which language, so we can show that you agreed.
• Push notification data, only if you allow notifications: a push address issued by your browser, its keys, and your browser and device type (user agent).
• Browser storage, used to keep you signed in and to remember your preferences (see section 6).

Push notifications. If you allow them, we send you push notifications about the stocks you follow. You can turn them off at any time in Settings or in your browser or device settings.

All personal information you give us must be true and accurate, and you should keep it up to date.

2. How do we process your information?

In short: we process your information to provide, improve and administer the Services, communicate with you, keep the Services secure, and comply with law. We may also process it for other purposes with your consent.

We process your personal information:

• To create and manage your account. To let you create an account, log in securely, and delete your account and its data when you ask (Settings → Account). (Kept until you delete your account.)
• To provide the Services to you. Including your paper portfolio, watchlist, AI analysis and the in-app assistant.
• To send you the stock alerts you choose. By email and, if you allow it, by browser push notification. You can change or turn off alerts in Settings. (Kept until you turn off alerts or delete your account.)
• To respond to your questions and offer support.
• To send you administrative information. For example, your invite, email confirmation, password resets, and changes to our terms and policies.
• To send you a weekly email about the stocks you follow (what moved and whether anything material happened). It is on by default for people who follow at least one stock; you can switch it off at any time in Settings (the link at the bottom of each email takes you there).
• To ask for your feedback about Hushtick.
• To protect the Services. Including limiting requests and preventing fraud and abuse.
• To apply fair-use limits to AI features. We count how many AI requests each user makes and what they cost to run, per day and per calendar month. When you reach the free monthly AI allowance, or when you add your own API key, we send ourselves an internal email naming your account, so we can follow up and keep costs under control. (Kept until you delete your account.)
• To offer you the right price. The link you signed up from can place your account in a pricing group (for example, a free first month of the paid plan, then a set monthly price, or free during the beta). The group is set once, when you create your account, and is not changed by later links. If you have a free month, we may show a note in the app and send you one email shortly before it ends, asking whether you want to stay on the paid plan. Nothing is charged unless you choose to pay. (Kept until you delete your account.)
• To understand interest in future paid plans. You may be shown a preview of a planned paid plan at one of two prices. If you click it, we record the price shown, where you clicked, and any optional comment you add. No payment is taken. (Kept until you delete your account.)
• To identify usage trends, so we can improve the Services.
• To measure which channels bring people to Hushtick, such as an ad or a post.
• To protect someone's vital interests, for example to prevent harm.

We do not send you marketing emails. If you clicked to hear about a paid plan, we may email you about it once it is available; you can opt out at any time. If you have a free month of the paid plan, we send you one email before it ends (see above).

3. What legal bases do we rely on to process your information?

In short: we only process your personal information when we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you

The GDPR and UK GDPR require us to explain the legal bases we rely on:

• Consent. For example, push notifications, the optional survey and feedback, storing your own API key, and emails about a paid plan you asked to hear about. You can withdraw your consent at any time (see Withdrawing your consent).
• Performance of a contract. To provide the Services you signed up for: your account, portfolio, AI analysis, assistant and alerts.
• Legitimate interests. Where it is reasonably necessary for our legitimate interests and those interests are not outweighed by your rights and freedoms. Specifically, to:
• analyse how the Services are used so we can improve them;
• understand which channels bring people to Hushtick;
• diagnose problems and prevent fraud and abuse;
• understand how users use the Services so we can improve their experience;
• keep the free service available to everyone by limiting daily AI use per user and controlling running costs;
• decide whether to offer a paid plan and at what price.
• Legal obligations. Where necessary to comply with the law, for example to cooperate with a regulator or law enforcement body, to exercise or defend our legal rights, or to disclose information as evidence in litigation.
• Vital interests. Where necessary to protect your vital interests or someone else's, such as a threat to a person's safety.

If you are located in Canada, this section applies to you

We process your information with your express consent, or where your consent can reasonably be implied. You can withdraw your consent at any time (see Withdrawing your consent). In limited cases, Canadian law allows us to process your information without consent, for example for investigations and fraud prevention, for business transactions that meet certain conditions, to comply with a subpoena, warrant or court order, or where the information is publicly available as specified by regulation.

4. When and with whom do we share your personal information?

In short: we share your information only with the service providers that run Hushtick for us, and in a business transfer.

Service providers. We share personal information with service providers that process it on our behalf and need access to it to do that work. They are bound by data processing agreements, may use your information only on our instructions, and must protect it. They are:

If you allow push notifications, your browser's own push service (for example Google, Apple or Mozilla) delivers them to your device.

The market-data providers we use to analyse stocks receive only stock symbols, never your personal information. We also receive a short summary of the general mood of public posts on X about some stocks (for example "mostly upbeat, busier than normal"), collected with xAI's Grok; it contains no account names, quotes or posts, and we send xAI no personal information. When you sign up, we check your new password against the Have I Been Pwned list of leaked passwords: only the first five characters of a scrambled (hashed) version of it are sent, never the password itself, so this reveals nothing about you.

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of assets, financing, or acquisition of all or part of our business, including the transfer of Hushtick to a company we set up.

We do not sell your personal information, share it for targeted advertising, or give it to advertisers or data brokers.

5. Is your information transferred internationally?

In short: our main database and servers are in the EU (Frankfurt, Germany). Some service providers process data in the United States and other countries.

Hushtick is operated from Israel. Our database, account login and backend servers are hosted in Frankfurt, Germany, in the European Union. Some of our service providers (for example for email, AI analysis, website delivery and encrypted backups) process information in the United States and in other countries where they operate, which may have data protection laws that differ from those in your country.

If you are in the EEA, the UK or Switzerland, we protect these transfers with the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents), which are included in our data processing agreements with these providers, or with another lawful transfer mechanism. Israel is recognised by the European Commission as providing an adequate level of data protection. You can ask us for a copy of the relevant safeguards by emailing hello@hushtick.com.

6. Do we use cookies and other tracking technologies?

In short: we use only the storage needed to keep you signed in and remember your settings. We do not use advertising or analytics cookies.

We do not use advertising cookies, analytics cookies, tracking pixels or social media plugins, and we do not allow third parties to track you on Hushtick.

We use your browser's local storage only to keep you signed in and to remember your preferences, such as language, theme and which tips you have already seen. This storage is necessary for the app to work and is never used to track you across other websites. Our network provider, Cloudflare, may set a strictly necessary security cookie to protect the site from bots.

You can clear this storage in your browser at any time, but you will then be signed out and your preferences will be reset.

7. Do we offer artificial intelligence-based products?

In short: yes. Hushtick uses AI to analyse stocks and to answer your questions.

We provide our AI features ("AI Products") through Anthropic, our AI service provider. Our AI Products:

• analyse news, price data, technical indicators and company fundamentals for the stocks users follow, and summarise where the evidence leans (bullish, bearish or neutral), with the reasons and risks;
• judge whether new headlines are relevant, and their sentiment;
• translate these analyses into your language;
• answer your questions in the in-app assistant;
• write a summary of your paper-trading portfolio when you ask for one.

What the AI receives. Stock analyses are created once per stock and shared with everyone who follows it; they are created without any personal information. The in-app assistant and the portfolio summary receive your question, your paper portfolio and your investing profile, but never your email address or password. The in-app assistant also receives the last few questions and answers of the conversation you are in, and its short note about you, so it can follow on and pick up where you left off. The AI makes no decisions about you and does not place trades.

You must not use the AI Products in a way that breaks the terms or policies of our AI service provider.

How to opt out. The in-app assistant and the portfolio summary are the only AI features that use your personal information, so you can opt out by not using them. You can also clear your investing profile in Settings, delete your account in Settings → Account, or contact us.

8. How long do we keep your information?

In short: we keep your information for as long as you have an account, unless the law requires otherwise.

• Account data (including your email address, portfolio, settings, AI history, survey answers, your general-information confirmation and usage records): until you delete your account. Deleting your account in Settings → Account removes it from our database immediately, including your waitlist entry.
• AI assistant chats and note: each question and answer is deleted 30 days after you ask it; the short note the assistant keeps about you is deleted after 90 days without a chat. You can delete the note and all saved chats at any time with "Forget everything" on the Shark page, and deleting your account deletes them too.
• AI cost records: when you delete your account, we keep the record of how much AI processing cost us, but with the link to you removed, so it is no longer personal information.
• Daily request counts (how many requests your account made each day): 90 days, then deleted automatically.
• Waitlist entries: if you have not joined, we delete your entry 12 months after you joined the waitlist.
• Invite links: a personal invite expires 30 days after we send it. A guest link stops working when it expires or we switch it off; the record of who joined through it is kept with that person's account.
• Feedback and emails you send us: kept in our database with your account, and in our mailbox until we no longer need them to reply or improve the Services.
• Website security reports: our website reports blocked content to us for security; these reports contain no personal information (only the rule, the blocked address and the page).
• IP addresses: held in memory for our request limits (at most one hour), plus our hosting providers' short-term server logs.
• Push subscriptions: removed when you turn off notifications or when your browser reports that the subscription has ended.
• Telegram or WhatsApp connection: removed when you disconnect (in Settings, or with /stop or STOP); one-time connection codes expire after 15 minutes.

Backups: once a week we make an encrypted copy of our database (your account email and app data, never passwords), stored privately with GitHub and readable only with a key we hold. Each copy is deleted after 28 days, so after you delete your account, your data can remain in a backup for up to 28 days. Backups are used only to restore the service after a failure.

9. How do we keep your information safe?

In short: we protect your personal information with organisational and technical security measures.

Our measures include encrypted connections (HTTPS), passwords stored only as hashes by our login provider, database rules that let each user access only their own data, encryption of any API key you store with us, request limits, browser security protections, refusing passwords known to have leaked, encrypted weekly backups, regular security checks of our code, and keeping our own access keys out of our code. However, no transmission over the internet or storage technology is 100% secure, so we cannot guarantee that unauthorised third parties will never defeat our security. Please use Hushtick in a secure environment.

If a security incident affects your personal information, we will notify you and the relevant authorities where the law requires it.

10. Do we collect information from minors?

In short: no. Hushtick is for people aged 18 or over.

We do not knowingly collect data from, or market to, children under 18 (or the equivalent age in your jurisdiction). By using the Services, you confirm that you are at least 18. If we learn that we have collected personal information from someone under 18, we will deactivate the account and promptly delete the data. If you become aware of this, please contact us at hello@hushtick.com.

11. What are your privacy rights?

In short: depending on where you live, including the EEA, the UK, Switzerland, Canada, Israel and some US states, you have rights that give you more access to and control over your personal information. Wherever you live, you can review, change or delete your account at any time.

Wherever you live, we will answer requests to access, correct, delete or export your personal information. Depending on where you live, you may also have the right to restrict or object to our processing, and not to be subject to decisions based solely on automated processing. To make a request, use Settings or email hello@hushtick.com. We will respond in line with applicable data protection laws, and within one month where the GDPR applies.

Complaints.

• EEA: you can complain to your national data protection authority.
• UK: you can complain to us first. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed and explain the outcome. If you are not happy with our final response, you can complain to the Information Commissioner's Office (ico.org.uk/make-a-complaint, helpline 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF).
• Switzerland: you can contact the Federal Data Protection and Information Commissioner.
• Israel: see section 14.

Withdrawing your consent

Where we rely on your consent (express or implied, depending on the law), you can withdraw it at any time by changing your settings (for example, turning off notifications) or by contacting us. This does not affect processing before the withdrawal, or processing based on other legal grounds.

Account information

You can review or change your account information, or delete your account, at any time in Settings. Deleting your account removes your data from our database. We may keep limited information where the law requires it or to resolve disputes and enforce our terms.

If you have questions about your privacy rights, email us at hello@hushtick.com.

12. Controls for Do-Not-Track features

Some browsers can send a Do-Not-Track ("DNT") or Global Privacy Control signal. There is no agreed standard for responding to DNT signals, so we do not respond to them. However, we do not track you across websites, sell your information, or use it for targeted advertising, so there is nothing for these signals to switch off.

13. Do United States residents have specific privacy rights?

In short: if you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have the right to access, correct, delete and get a copy of your personal information, among other rights. These rights may be limited in some cases by law.

Categories of personal information we collect

The table shows the categories of personal information we have collected in the past twelve months. For the full list, see section 1.

We keep categories A, D and F for as long as you have an account with us (see section 8).

Sources. All personal information comes from you or from your use of the Services (see section 1).

Use and disclosure. We use personal information as described in section 2. We disclose categories A, D and F to our service providers under written contracts, as described in section 4. We may also use personal information for our own internal research and development, which is not a "sale".

We have not sold or shared personal information (including for targeted advertising) in the past twelve months, and we do not knowingly sell or share the personal information of anyone under 16.

Your rights

Depending on the state you live in, your rights include:

• the right to know whether we process your personal data, and to access it;
• the right to correct inaccuracies in your personal data;
• the right to request deletion of your personal data;
• the right to get a copy of the personal data you shared with us;
• the right not to be discriminated against for exercising your rights;
• the right to opt out of targeted advertising, the sale of personal data, and profiling for decisions with legal or similarly significant effects (we do none of these);
• the right to a list of the categories of third parties we disclose data to (for example, in California, Delaware and Maryland), or of the specific third parties (for example, in Minnesota and Oregon). Both are in section 4.

How to exercise your rights

Use Settings, or email us at hello@hushtick.com.

You can have an authorised agent make a request on your behalf. We may deny a request from an agent who cannot show that they have been validly authorised in line with applicable law.

Request verification

When we receive your request, we need to verify that you are the person the information is about. We will normally ask you to confirm the request from the email address on your account. We use any information you give us for verification only for that purpose.

Appeals

If we decline to act on your request, you can appeal by emailing hello@hushtick.com. We will tell you in writing what we did or did not do in response, and why. If your appeal is denied, you can complain to your state attorney general.

14. Users in Israel

If you are in Israel, we process your personal information in accordance with the Israeli Protection of Privacy Law, 5741-1981, and its regulations, as amended (including Amendment 13). You are not legally required to give us any personal information; however, without an email address we cannot create an account for you. You have the right to access your personal information and to ask us to correct or delete it. To make a request, contact us at hello@hushtick.com. If you are not satisfied with our response, you can contact the Privacy Protection Authority.

15. Paper trading, waitlist and AI analysis

Hushtick is a paper-trading and analysis service. We do not connect to brokerage or bank accounts, hold user funds, or collect payment card details; any portfolio you create in Hushtick uses simulated money only. If you join our waitlist, we use your email address only to send you your invite, and we delete your waitlist entry 12 months after you joined if you have not created an account. Stock analyses are generated once per stock and shared with all users who follow it; they are created without any of your personal information.

16. Do we make updates to this notice?

In short: yes, we will update this notice as needed to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will show a new "Last updated" date at the top. If we make material changes, we will tell you in the app or by email before they take effect.

17. How can you contact us about this notice?

If you have questions or comments about this notice, email us at hello@hushtick.com.

Max Glaser, doing business as Hushtick Israel

18. How can you review, update or delete the data we collect from you?

You can review, update or delete your personal information, or withdraw your consent, in Settings, where you can also delete your account. To request a copy of your data or anything else, email hello@hushtick.com.